agora inbox for pgsql-committers@postgresql.org
help / color / mirror / Atom feedFrom: Fujii Masao <fujii@postgresql.org>
To: pgsql-committers@lists.postgresql.org
Subject: pgsql: Warn on password auth with MD5-encrypted passwords
Date: Wed, 01 Jul 2026 11:58:46 +0000
Message-ID: <E1wetaZ-000ubB-0X@gemulon.postgresql.org> (raw)
Warn on password auth with MD5-encrypted passwords
Commit bc60ee860 added a connection warning after successful MD5
authentication, but only for the md5 authentication method. A role with
an MD5-encrypted password can also authenticate via the password method,
which left that path without the same deprecation warning.
Emit the MD5 deprecation connection warning after successful
password authentication as well, when the stored password is
MD5-encrypted.
Backpatch to v19, where the MD5 connection warning was introduced.
Author: Fujii Masao <masao.fujii@gmail.com>
Reviewed-by: Chao Li <li.evan.chao@gmail.com>
Reviewed-by: Japin Li <japinli@hotmail.com>
Discussion: https://postgr.es/m/CAHGQGwGkWfn5rtHzvdRbVk+PCefQU3gun3hc7QnaMXHFa5Bu3w@mail.gmail.com
Backpatch-through: 19
Branch
------
REL_19_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/e57a865dc7003f75d3a2d080603c95dd469b89a5
Modified Files
--------------
doc/src/sgml/config.sgml | 3 ++-
src/backend/libpq/auth.c | 33 +++++++++++++++++++++++++++++++
src/backend/libpq/crypt.c | 22 ---------------------
src/test/authentication/t/001_password.pl | 10 ++++++++++
4 files changed, 45 insertions(+), 23 deletions(-)
view thread (2+ messages)
Message-ID: <E1wetaZ-000ubB-0X@gemulon.postgresql.org>
Permalink: ../E1wetaZ-000ubB-0X@gemulon.postgresql.org/
Also on: postgresql.org/message-id/E1wetaZ-000ubB-0X@gemulon.postgresql.org
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-committers@postgresql.org
Cc: fujii@postgresql.org, pgsql-committers@lists.postgresql.org
Subject: Re: pgsql: Warn on password auth with MD5-encrypted passwords
In-Reply-To: <E1wetaZ-000ubB-0X@gemulon.postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox